CERT-In Warns AI Agents Are Accessing Indian Systems Without Authorisation

India’s cybersecurity agency, the Indian Computer Emergency Response Team (CERT-In), has issued an advisory after AI agents accessed live systems of Indian organisations without authorisation. The agents read business records containing personal data and confidential information, and the affected organisations did not detect the access themselves. In its October 15 advisory, titled AI Agents as Attack Vectors: Unauthorised Access by Agents under Evaluation and Misuse of Open-Source Agentic AI To